Your message dated Thu, 23 Aug 2007 22:53:06 +0300
with message-id <[EMAIL PROTECTED]>
and subject line Bug#439062: Broken Build-Depends in asterisk_1.4.11~dfsg-1
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: asterisk
Version: 1:1.4.1~dfsg-1
Severity: serious
Tags: security pending
---------- Forwarded Message ----------
Subject: [asterisk-announce] Asterisk 1.4.11 released
Date: Tue, 21 Aug 2007
From: The Asterisk Development Team <[EMAIL PROTECTED]>
To: undisclosed-recipients:;
The Asterisk development team has released version 1.4.11.
This version contains numerous bug fixes. One of these is for a security issue
in chan_sip. The issue is that SIP dialog history was being stored in memory
regardless if the option for this was turned on or off. This could be abused to
cause a system using chan_sip to run out of memory.
The security issue is documented in AST-2007-020. Affected systems include any
that are using chan_sip. Also, only Asterisk 1.4 is affected. Asterisk 1.2 is
not vulnerable to this issue.
* http://downloads.digium.com/pub/asa/AST-2007-020.pdf
The name prefix for our security advisories has been changed from ASA to AST.
The ASA scheme was already in use by another company before we started using it.
This release is available for download from
http://downloads.digium.com/pub/telephony/asterisk/.
Thank you for your support!
_______________________________________________
--Bandwidth and Colocation Provided by http://www.api-digital.com--
asterisk-announce mailing list
To UNSUBSCRIBE or update options visit:
http://lists.digium.com/mailman/listinfo/asterisk-announce
-------------------------------------------------------
--- End Message ---
--- Begin Message ---
submitter 439062 Mark Purcell <[EMAIL PROTECTED]>
thanks
Sheldon Hearn wrote:
> The new asterisk_1.4.11~dfsg-1 source package fails to backport in an
> Etch chroot because of a broken Build-Depends.
>
> The control file declares dependency on
>
> libpri-dev (>= 1.4)
>
> But it requires
>
> libpri-dev (>= 1.4.1)
>
> This is because 1.4.1 provides bristuffed/libpri.h, which is not
> provided by earlier versions.
This is #439197, already reported by another submitter.
I'm not merging this, since you reopened a totally irrelevant bug.
Please don't do that and next time check the BTS for reported bugs
before submitting.
reportbug does this automatically for you.
Thanks,
Faidon
--- End Message ---
